A high-severity flaw in Elementor, the page builder running on over 10 million WordPress sites, lets an attacker create a rogue administrator the moment a logged-in admin opens a booby-trapped link. If your dental practice website was built with Elementor, here is why it matters...
A critical WordPress Core flaw, CVE-2026-87902, went from public disclosure to active exploitation in under five hours. If your practice website runs WordPress on typical cPanel hosting, here is why it may be in the vulnerable configuration and exactly what to do this week....
A bill reintroduced in the Senate would replace healthcare's voluntary cybersecurity guidance with enforceable minimum standards, mandatory audits, annual executive sign-off, and far larger penalties. Here is what the Health Infrastructure Security and Accountability Act would require, and why a small dental practice should start...
Since 2023, U.S. law has required the makers of connected medical and dental imaging devices to build cybersecurity in and prove it to the FDA. Most practices have never thought to ask about it. Here is how to turn that rule into three questions you...
Security firms are tracking active, unpatched attacks against a flaw in FastJson - an open-source Java component buried inside other people's software - and healthcare is on the list of industries being hit. Most dental practices will never run FastJson directly. The reason this still...
Backup software is supposed to be the thing that saves you after an attack - so it is unsettling when the backup tool itself becomes the way in. On September 16, 2026, CISA added CVE-2026-87886, a flaw in the Acronis Backup plugin for cPanel and...
Weeks after the last N-central scare, a worse one has landed: CVE-2026-86218, a pre-authentication remote code execution zero-day rated a perfect 10.0 and already exploited in the wild. It needs no password. Most dental practices are exposed through their IT provider, not directly - here...
Google Meet can be used for a compliant patient video visit - but only on a paid Google Workspace plan with a signed Business Associate Agreement and the right configuration. The free version most people click into is not covered, and using it for a...
Anthropic - the company behind the Claude AI model - just disclosed that attackers used its own AI to rebuild malware every time security products caught it, and to strip secrets out of 1.8 million Android apps. This is the shift defenders have been bracing...
CISA has confirmed ransomware gangs are now exploiting a critical WatchGuard Firebox firewall flaw (CVE-2025-14733) that lets an attacker run code on the device with no password at all. Nine months after the patch shipped, roughly 9,000 firewalls are still exposed. If your dental practice...
Microsoft's September 2026 Patch Tuesday is its largest ever - roughly 974 fixes, two of them for flaws already being exploited. A dental practice cannot patch 974 things by Friday, and it does not have to. Here is how to read a record-breaking update without...
On September 6, 2026, the Direwolf ransomware group listed dental-billing outsourcer eAssist Dental Solutions on its leak site. When the vendor that runs your billing is breached, the exposed patient data is still your responsibility - here is what that means for your practice....
The moment you point an AI tool at a radiograph or a consult recording, you have created a new pathway for protected health information to leave your practice - and the accountability does not leave with it. Here is how HIPAA and Ontario's PHIPA actually...
AI scribes promise to get your clinicians out of the chart and back to the patient. But 'AI scribe' covers three different products - structured voice charting, dental-native platforms, and horizontal ambient note-takers borrowed from medicine. Here is how Bola AI, Heidi, and Denti.AI actually...
Ontario dentists must keep patient records for at least ten years, then destroy them securely. That single sentence hides a decade of IT decisions about storage, backups, format survival, and disposal that most practices never plan for....
